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Top Stories 

• About 500,000 gallons of wastewater was discharged into Joe’s Creek in St. Petersburg, 
Florida, September 27 when an underground pipe ruptured due to heavy rain and continued 
to spill between 250-500 gallons per minute. - Bay News 9 Tampa (See item 12 ) 

• A Spokane County Fire District 8 official reported September 29 that a suspected arsonist 
is believed to have ignited 23 fires in 3 weeks in Washington, destroying 2 homes since 
September 9. - Reuters (See item 16 ) 

• Thirty-eight people were treated after chemical fumes were released into classrooms in the 
Health Sciences Center at Eastern Florida State College’s Cocoa campus prompting an 
evacuation and the cancellation of classes September 29. - Florida Today (See item 19 ) 

• Supervalu officials reported September 29 that hackers installed a piece of malware on the 
company’s network that may have captured customers’ payment card information from the 
payment processing systems of several Cub Foods and Albertson’s stores across the U.S. 
between August and September. - Securityweek (See item 28 ) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

1. September 30, Richmond Times-Dispatch - (Virginia) Two nuclear fuel rods found 
damaged during North Anna power plant refueling. The operators of the North 
Anna 2 nuclear power plant in Louisa County found two damaged nuclear fuel rods 
during a scheduled refueling in September. The damage was caused by baffle jetting 
and caused about 15 fuel pellets to come out of the rods but was contained within the 
reactor system and did not pose a threat of release. 

Source: http://www.newsadvance.com/work it lynchburg/news/two-nuclear-fuel-rods- 
found-damaged-during-north-anna-power/article 2acf3bfe-48a2-lle4-918b- 
001a4bcf6878.html 

[ Return to top ] 

Critical Manufacturing Sector 

2. September 29, Reuters - (National) Toyota to recall 690,000 Tacoma vehicles in U.S. 
to fix suspension. Toyota announced a recall for around 690,000 model year 2005- 
2011 Tacoma vehicles due to the potential for the vehicles’ rear suspension leaf springs 
to fracture due to corrosion. Broken suspension leaves could then come in contact with 
nearby components, including the fuel tank, which could cause a fuel leak and present a 
fire risk. 

Source: http://preview.msn.com/en-us/news/us/tovota-to-recall-690000-tacoma- 
vehicles-in-us-to-fix-suspension/ar-BB6pcsX 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 
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3. September 30, Softpedia - (International) Variant of Upatre malware dropper seen 
in bank emails. A security researcher reported finding a new variant of the Upatre 
malware dropper attached to emails purporting to be from financial institutions. The 
new variant is distributed as a download through a link in the malicious emails and has 
a low VirusTotal detection rate. 

Source: http://news.softpedia.com/news/Variant-of-Upatre-Malware-Dropper-Seen-In- 
Bank-Emails-460463.shtml 

4. September 29, U.S. Securities and Exchange Commission - (National) SEC charges 
two Florida men with defrauding investors in purported television network. The 
U.S. Securities and Exchange Commission filed charges September 29 against the 
Florida-based former CEO of Vision Broadcast Network and a consultant for allegedly 
raising at least $5.7 million from investors nationwide based on misrepresentations of 
the company’s ownership of television stations and broadcast licenses. The U.S. 
Attorney’s Office for the Eastern District of Pennsylvania also filed parallel criminal 
charges against the two individuals September 29. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370543063872 

5. September 29, Federal Deposit Insurance Corporation - (Utah) FDIC announces 
settlement with Merrick Bank, South Jordan, Utah, for unfair and deceptive 
practices. The Federal Deposit Insurance Corporation (FDIC) announced September 
29 that Merrick Bank located in South Jordan, Utah, reached a settlement with the 
FDIC over charges that the bank engaged in unfair and deceptive practices relating to 
the marketing and servicing of “add-on products.” The bank agreed to pay a $1.1 
million penalty and to pay around $15 million in restitution to affected customers. 
Source: https://www.fdic.gov/news/news/press/2014/prl4080.html 

For another story, see item 28 
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Transportation Systems Sector 

6. September 30, WFAA 8 Dallas - (Texas) American jet makes emergency landing at 
DFW. A Baltimore-bound American Airlines flight from Dallas returned to Dallas Fort 
Worth International Airport for an emergency landing due to a problem with the 
landing gear shortly after takeoff September 29. The flight carrying 140 passengers and 
5 crewmembers circled around north Texas for almost 3 hours, burning excess fuel 
before landing safely. 

Source: http://www.khou.com/story/news/local/texas/2014/09/30/american-iet-makes- 
emergency-landing-at-dfw/1 6472045/ 

7. September 29, Grand Rapids Press - (Michigan) Semi-truck rolls, dumps pigs onto 
M-37 in Newaygo County. Michigan Highway 37 in Newaygo County was shut down 
for about 5 hours September 29 as crews worked to clear up the roadway after a semi- 
truck hauling more than 100 full-grown pigs overturned and killed some of the animals. 
The driver was sent to a nearby hospital. 
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Source: http://www.mlive.com/news/grand-rapids/index.ssf/2014/09/semi- 
truck rolls dumping pigs.html 

8. September 29, Gainesville Sun - (Florida) 10 injured in Bradford school bus crash. 
Ten people were injured, including seven elementary school students, after an out of 
control semi-truck crashed into the back of a Starke Elementary School bus in Bradford 
County on U.S. 301 September 29, closing the roadway for 4 hours. 

Source: http ://w w w . gaines ville.com/article/20 1 40929/ ARTICLES/ 1 409296 17/- 
l/news03 
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Food and Agriculture Sector 

9. September 30, Green Bay Press-Gazette - (Wisconsin) Yuck! Truck spills 5,000 
gallons of manure. Authorities are investigating after a truck carrying manure slipped 
and overturned on Blake Road September 29, spilling about 5,000 gallons of manure 
and closing the roadway for several hours while crews worked to clean up the spill. 
Source: http://www.greenbavpressgazette.com/story/news/local/2014/09/29/report- 

o verturned-manure-truck-near- greenleaf/ 16441039/ 

10. September 29, Greensburg Daily News - (Indiana) Fire destroys combine, tool shed. 
Authorities are investigating the cause of a fire that began inside the engine 
compartment of a combine being used in a field and spread to a tool shed on a farm in 
Greensburg, Indiana, after the fuel line broke when the operator drove it into the shed 
in an attempt to extinguish the blaze September 29. Both the combine and shed were 
destroyed. 

Source: http://www.greensburgdailynews.com/news/local news/article bfd8867a-29fe- 
5920-9deb-000af6fa21 19.html 



For another story, see item 7 
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Water and Wastewater Systems Sector 

11. September 30, Pittsburgh Tribune -Review - (Pennsylvania) Water outage hits 
Washington Twp. Many Municipal Authority of Washington Township customers in 
Fayette City, Gillespie, and other homes and businesses along State Route 201 were 
without water for about 3 hours September 29 due to a water outage. The cause of the 
outage was not known. 

Source: 

http://triblive.com/neighborhoods/vourmonvallev/vourmonvalleymore/6885086- 

74/washington-baer-close 

12. September 29, Bay News 9 Tampa - (Florida) Ruptured sewage line spills 500,000 
gallons of wastewater. An estimated 500,000 gallons of wastewater was discharged 
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into Joe’s Creek in St. Petersburg September 27 when an underground pipe ruptured 
due to excessive rain and continued to spill between 250-500 gallons per minute. The 
spill forced the nearby Northside Christian School to delay start times for the next 
several days as crews work to repair the sewage line. 

Source: 

http://www.bavnews9.com/content/news/bavnews9/news/article.html/content/news/arti 
cles/bn9/20 14/9/29/sewer leak in st pet.html 

For another story, see item 27 
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Healthcare and Public Health Sector 

13. September 30, CATV - (Texas) Five babies test positive for TB in Texas. Five infants 
tested positive for tuberculosis (TB) after being exposed to a nurse who reported to 
work with an active case of TB at Providence Memorial Hospital in El Paso. The 
hospital reported that over 850 infants and 43 health care workers were potentially 
exposed to the disease after coming into contact with the infected nurse between 
September 2013 and August 2014. 

Source: http://www.cnn.com/2014/09/29/health/babies-test-positive-tb/index.html 
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Government Facilities Sector 

14. September 30, WESH 2 Daytona Beach - (Florida) Deputies: Bomb threats 
prompted evacuations at 4 schools in Lake County. Four Lake County schools were 
evacuated for more than 3 hours September 29 after South Lake High School in 
Groveland, Clermont Middle School, and Cecil E. Gray Middle School received bomb 
threats. Police cleared the scene at all four schools before resuming classes. 

Source: http://www.wesh.com/news/bomb-threat-prompts-evacuations-at-south-lake- 
high-school-school-officials-say/283 12328 

15. September 30, Reuters; Chicago Tribune - (North Carolina) North Carolina school 
shooting stemmed from argument, police say. Albemarle High School in North 
Carolina was placed under lockdown before students were evacuated and classes were 
dismissed after an altercation between two students outside the school’s entrance left 
one student shot and injured September 30. The suspected shooter surrendered to police 
without further incident. 

Source: http://www.chicagotribune.com/news/nationworld/chi-north-carolina-school- 
shooting-20140930-story.html 

16. September 29, Reuters - (Washington) Arsonist suspected in up to 23 blazes in 
Washington state. The assistant fire chief of Spokane County Lire District 8 reported 
September 29 that a suspected arsonist is believed to have ignited 23 fires in 3 weeks in 
Washington, destroying 2 homes since September 9. Officials found the fires were all 
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set in a similar distinct pattern. 

Source: http://www.reuters.com/article/2014/Q9/29/us-usa-arson-washington- 
idUSKCNOH01VB2Q 140929 



17. September 29, Washington Post - (California) California’s massive King fire is 
almost fully contained. But it’s not dead yet. Fire crews reached 92 percent 
containment September 29 of the King Fire which has burned more than 97,000 acres 
in northern California and destroyed 12 homes and 68 other structures. Officials expect 
to reach full containment of the fire by October 4. 

Source: http://www.washingtonpost.com/news/post-nation/wp/2014/09/29/californias- 
massive-king-fire-is-almost-fully-contained-but-its-not-dead-yet/ 

18. September 29, KWCH 12 Hutchinson - (Kansas) Newton City Hall reopens after 
bomb threat. Authorities are investigating after Newton City Hall and surrounding 
buildings were evacuated for several hours September 29 after a call was made to 9-1-1 
claiming a bomb was outside the Harvey County Community Corrections Center in 
Kansas. A bomb squad removed the device and safely dismantled it before clearing the 
scene. 

Source: http://www.kwch.com/news/local-news/buildings-being-evacuated-in-newton- 
due-to-bomb-threat/283 13260 

19. September 29, Florida Today - (Florida) 7 taken to hospital after evacuation at 
EFSC. Thirty-one people were treated at the scene while 7 others were transported to 
area hospitals after chemical fumes were released into classrooms in the Health 
Sciences Center at Eastern Florida State College’s Cocoa campus prompting an 
evacuation and the cancellation of classes September 29. School officials believe an 
individual poured a chemical into a sink in a room used to develop X-rays, causing the 
chemical vapors to waft throughout the building. 

Source: http://www.floridatoday.com/story/news/education/2014/09/29/efsc-building- 
on-cocoa-campus-evacuation/1 6426 111/ 

20. September 29, Montana Standard - (Montana) Beaverhead County High evacuated 
after prank calls. A hoax bomb threat prompted the evacuation of students and the 
cancellation of classes at Beaverhead County High School in Dillon September 29. 
Police searched the school and cleared the scene once nothing suspicious was found. 
Source: http://mtstandard.com/news/local/beaverhead-county-high-evacuated-after- 
prank-calls/article 59b9d833-0c63-5cdl-8ecb-5630e580b4d9.html 

For additional stories, see items 8 and 27 
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Emergency Services Sector 

See item 18 
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Information Technology Sector 

21. September 30, Help Net Security - (International) Apple patches Shellshock bug in 
OS X. Apple released a security update for its OS X operating system that closes two 
remotely exploitable vulnerabilities in the GNU Bash UNIX shell known as 
Shellshock. 

Source: http://www.net-security.org/secworld.php7km7430 

22. September 30, Securityweek - (International) ‘Shellshock’ attacks could already top 
1 billion: Report. Incapsula researchers reported that the company’s Web application 
firewall deflected over 217,000 attempted exploitations of the Shellshock 
vulnerability in GNU Bash during the 4 days after the vulnerability was disclosed and 
estimated that the total number of attacks attempting to exploit the flaw could reach 1 
billion. 

Source: http://www.securitvweek.com/shellshock-attacks-could-alreadv-top-l- 
billion-report 

23. September 30, Softpedia - (International) Seller of StealthGenie mobile spyware 
app indicted and arrested. The CEO of InvoCode was arrested September 27 in Los 
Angeles for allegedly selling and advertising the StealthGenie mobile spyware. The 
Pakistani national allegedly worked with others to develop and market the spyware 
that is compatible with major mobile operating systems such as Android, Blackberry, 
and iOS. 

Source: http://news.softpedia.com/news/Seller-of-StealthGenie-Mobile-Spvware- 
App-Indicted- And- Arrested-460448 . shtml 

24. September 29, Softpedia - (International) Signed CryptoWall delivered via 
malvertising campaign on top-ranked websites. Researchers with Barracuda Labs 
identified a variant of the CryptoWall ransomware signed with a valid digital 
certificate from DigiCert and spread through malicious ads on the Zedo ad network to 
several popular Web sites. As of September 29, the CryptoWall variant was detected 
by 12 of 55 security solutions on VirusTotal. 

Source: http://news.softpedia.com/news/CrvptoWall-Delivered-Via-Malvertising- 
Campaign-on-Top-Ranked-Websites-460375 .shtml 

25. September 29, Threatpost - (International) RadEditor web editor vulnerable to 
XSS attacks. A researcher identified and reported a cross-site scripting (XSS) 
vulnerability in the RadEditor text editor used in several Microsoft products that 
could allow attackers to inject malicious script and obtain private data. The 
vulnerability was closed by Telerik September 24. 

Source: http://threatpost.com/radeditor-web-editor-vulnerable-to-xss-attacks 

26. September 29, Softpedia - (International) All CloudFlare customers benefit from 
Universal SSL. CloudLlare announced September 29 that it was providing all 
customers with SSL certificates under its Universal SSL service to enhance security. 
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Source: http://news.softpedia.com/news/All-CloudFlare-Customers-Benefit-from- 
Universal-SSL-460374.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

27. September 30, WLOX 13 Biloxi - (Mississippi) Broken water main shuts off water to 
hundreds of homes, two schools. A water main break in Gulfport prompted crews to 
shut off water service to hundreds of home and businesses for about 10 hours 
September 29 resulting in a 48-hour boil water notice once repairs were completed and 
service was restored. Two Harrison County elementary schools were without water for 
about 2 hours while crews redirected water through a separate water main. 

Source: http://www.wlox.com/story/26655401/broken-water-main-shuts-off-water-to- 
hundreds-of-homes-two-schools 

28. September 30, Securityweek - (International) New data breaches hit Supervalu, 
Albertson's. Supervalu officials reported a second incident September 29 where 
hackers installed a different piece of malware on the company’s computer system that 
potentially captured customers’ payment card information from the payment processing 
systems of four Cub Foods stores in Minnesota and several Albertson’s grocery stores 
across the U.S. between August and September. 

Source: http://www.securitvweek.com/new-data-breaches-hit-supervalu-albertsons 

29. September 30, Associated Press - (Tennessee) Dozens lose home in apartment blaze. 
More than 40 residents were displaced by a fire that destroyed 12 units at the Bell 
Hollow Apartments complex in Metro Nashville September 29. The cause of the fire is 
under investigation. 

Source: http://www.greenevillesun.com/news/ap state news/article 7e0d2e62-9323- 
5277-96a4-fl2ed4247798.html 

30. September 29, KGUN 9 Tucson - (Arizona) Fire shuts down Oracle Road strip mall. 
Stores at the Plaza del Oro strip mall in Tucson were shut down due to water damage 
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from a sprinkler system that was activated by a fire that broke out September 29 inside 
the cooking area of a business. Officials are working to determine the cause of the 
blaze. 

Source: http://www.irn.com/kgun9/news/Fire-shuts-down-Oracle-Road-strip-mall- 



277485132.html 



31. September 29, Whittier Daily News - (California) Church, homes evacuated after 
suspicious device left on Covina home’s driveway. A church and 14 homes in Covina 
were evacuated for about 3 hours September 29 while the Los Angeles County Sheriff 
Department’s Arson Explosives Unit investigated an electronic device that was left on 
the driveway of a residence. The package was detonated and later determined to be an 
improvised fake explosive device made of electrical components left by two individuals 
known by the homeowner. 

Source: http://www.sgvtribune.com/general-news/20140929/church-homes-evacuated- 
after-suspicious-device-left-on-covina-homes-driveway/l 

32. September 29, Whittier Daily News - (California) 12 injured after being exposed to 
pepper spray during incident at Covina Home Depot. A Home Depot store in 
Covina, Los Angeles, was evacuated for nearly 2 hours September 29 after a customer 
released pepper spray during a confrontation with another patron inside the store. Eight 
individuals received medical treatment at the scene and four others were hospitalized 
for injuries related to exposure to the irritant. 

Source: http://www.sgvtribune.com/general-news/20140929/12-injured-after-being- 
exposed-to-pepper-spray-during-incident-at-covina-home-depot 

For another story, see item 11 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
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Contact Information 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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